Behavioral task
behavioral1
Sample
2025-03-24_6b19481af7b2739c06efc5712b8900ea_icedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-24_6b19481af7b2739c06efc5712b8900ea_icedid.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-03-24_6b19481af7b2739c06efc5712b8900ea_icedid
-
Size
6KB
-
MD5
6b19481af7b2739c06efc5712b8900ea
-
SHA1
424467e6448c8a4a159076cb480bb9d148b67afe
-
SHA256
2b2f21e4139ae2a438bcea08e1b1e8f50fe76358a5c504c232abbc7a44e535d5
-
SHA512
5097786310c2d4e176a4fb7b96e4a82534ce13945b7d495f7791a4bcb6887bae4db0b7938df72f026c9dd42e2b1170c647653db4c2aaa0742ad96519da376b5b
-
SSDEEP
96:M8i7XUhDAP0yb1cCln0MzUi0/6ieyjtgS:M8i7XUhEP0yb1rBw6itjGS
Malware Config
Extracted
icedid
Signatures
Files
-
2025-03-24_6b19481af7b2739c06efc5712b8900ea_icedid.exe windows:5 windows x86 arch:x86
66fb69ac1c1c80974e342b22e914ff54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpOpen
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpReadData
WinHttpCloseHandle
WinHttpSetOption
WinHttpQueryHeaders
WinHttpConnect
WinHttpOpenRequest
WinHttpQueryDataAvailable
kernel32
HeapReAlloc
CreateDirectoryA
ExitProcess
lstrcpyA
Sleep
lstrcatA
lstrlenA
VirtualAlloc
VirtualProtect
GetModuleFileNameA
GetProcessHeap
GetFileSize
HeapAlloc
ReadFile
HeapFree
WriteFile
CreateFileA
CloseHandle
user32
wsprintfA
wsprintfW
shell32
SHGetFolderPathA
advapi32
GetUserNameA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ